Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/0e05d6-c651-4c13-a3d7-d0b6979477e0/1/37L5jV2TMMKCX8ikvqWOWitKvvM.mft
File: 37L5jV2TMMKCX8ikvqWOWitKvvM.mft (raw, json)
Hash identifier: vl6eMv1xwOMlWQHYj9uJviq9gvKws6lePNrU/hCBpM4=
Subject key identifier: 4B:5E:B3:6B:CA:DD:DF:9C:18:AF:C9:54:AB:3E:CD:6B:0B:ED:43:B1
Authority key identifier: DF:B2:F9:8D:5D:93:30:C2:82:5F:C8:A4:BE:A5:8E:5A:2B:4A:BE:F3
Certificate issuer: /CN=dfb2f98d5d9330c2825fc8a4bea58e5a2b4abef3
Certificate serial: 01A0F1C31252968D302BDA10A0ED5E06664A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/37L5jV2TMMKCX8ikvqWOWitKvvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/0e05d6-c651-4c13-a3d7-d0b6979477e0/1/37L5jV2TMMKCX8ikvqWOWitKvvM.mft
Manifest number: 0135
Signing time: Wed 30 Sep 2026 10:01:28 +0000
Manifest this update: Wed 30 Sep 2026 10:01:28 +0000
Manifest next update: Thu 01 Oct 2026 10:01:28 +0000
Files and hashes: 1: 37L5jV2TMMKCX8ikvqWOWitKvvM.crl (hash: lCzJBIlkGnbH3D0uVwkIEeImAum+je5vXs3btL4Rq+E=)
2: ORzFbjO5Nia0kcigCY2OWktPzNg.roa (hash: H6lUS3aRzmCFN45+2w1+AEQR77kkwodYeALKmKNgXVM=)
3: _aahlkyboV8i3HTyR4FJOxLSMv4.asa (hash: dD7N2xKq7irXsIrhG/fQS/8UXa6cF4atm0nL0eK5Z0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/0e05d6-c651-4c13-a3d7-d0b6979477e0/1/37L5jV2TMMKCX8ikvqWOWitKvvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/0e05d6-c651-4c13-a3d7-d0b6979477e0/1/37L5jV2TMMKCX8ikvqWOWitKvvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/37L5jV2TMMKCX8ikvqWOWitKvvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 10:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f1:c3:12:52:96:8d:30:2b:da:10:a0:ed:5e:06:66:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfb2f98d5d9330c2825fc8a4bea58e5a2b4abef3
Validity
Not Before: Sep 30 10:01:28 2026 GMT
Not After : Oct 1 10:01:28 2026 GMT
Subject: CN=4b5eb36bcadddf9c18afc954ab3ecd6b0bed43b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:0a:d5:4c:7f:70:db:29:56:ac:bf:29:c4:67:
a5:5e:05:17:6d:0c:26:6f:08:fc:9b:ec:cb:65:05:
78:45:47:4c:4a:0f:e4:cb:15:0c:46:e6:e0:e2:59:
7f:f8:4c:f9:9e:9f:1b:39:d7:90:50:5e:3f:18:89:
57:ac:88:ae:8f:19:0b:4b:e3:4c:20:ec:17:65:bc:
a1:78:aa:ed:86:bf:f7:72:f9:1a:5c:3c:a2:57:e8:
b5:61:a9:64:eb:92:55:be:de:90:fd:f5:f9:d4:f9:
d2:44:02:80:45:7e:11:ac:05:0b:bc:b9:a2:bd:21:
42:5b:fe:30:4e:9c:ab:21:9c:17:83:86:dd:b1:ab:
e1:87:3a:b5:d0:d8:2c:fd:43:e1:5c:a0:17:41:fb:
f7:32:63:42:6f:a3:de:25:d3:bc:4d:92:2c:5f:bc:
b6:52:cc:03:67:01:8d:2d:14:8e:98:9a:74:ce:83:
9a:66:2d:6d:aa:f0:32:ef:23:b8:29:b7:35:3a:8f:
f0:b7:c6:93:4e:e4:c3:0a:97:59:84:7c:04:b8:06:
c9:f1:91:ea:e1:c5:43:d1:ae:cb:11:9f:b7:92:f1:
61:e0:fd:6d:b9:a8:b2:b6:42:ba:88:81:71:3e:a0:
28:a4:b1:ee:a2:33:e6:15:7f:c9:eb:df:68:0a:f8:
cc:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:5E:B3:6B:CA:DD:DF:9C:18:AF:C9:54:AB:3E:CD:6B:0B:ED:43:B1
X509v3 Authority Key Identifier:
keyid:DF:B2:F9:8D:5D:93:30:C2:82:5F:C8:A4:BE:A5:8E:5A:2B:4A:BE:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/37L5jV2TMMKCX8ikvqWOWitKvvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/0e05d6-c651-4c13-a3d7-d0b6979477e0/1/37L5jV2TMMKCX8ikvqWOWitKvvM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/0e05d6-c651-4c13-a3d7-d0b6979477e0/1/37L5jV2TMMKCX8ikvqWOWitKvvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:53:50:c6:9f:cb:37:ce:a5:f0:4c:9d:dc:6e:a1:89:61:e9:
ac:ad:70:96:ed:06:7d:72:9b:c2:24:36:1b:88:b3:f0:9b:23:
17:7c:74:b6:3c:7d:2b:fc:18:02:cc:6b:74:ed:ab:a3:e4:33:
b3:4f:2e:58:92:28:e0:4b:3a:8f:f3:da:67:a1:03:8c:63:4b:
ae:3f:66:55:0f:e8:f5:82:92:ef:ab:6b:56:97:eb:0c:50:bb:
8d:cb:71:cd:9f:24:a1:e3:27:54:72:81:7d:7f:4b:04:62:08:
c2:38:6c:da:49:99:d4:74:ad:10:89:d4:1d:8e:02:ad:af:e9:
38:2e:ea:b6:30:3a:0d:d6:95:a2:5a:24:db:b7:3c:e6:ca:43:
aa:3a:98:ac:bf:55:97:57:56:63:10:9f:f5:84:91:8e:f2:df:
00:6e:c9:47:1b:85:4c:0b:5d:fb:67:5d:36:2b:71:e8:a9:fe:
b2:97:59:96:0c:6c:a1:71:39:88:2d:d7:96:b6:d2:e6:42:59:
a5:df:a9:59:6f:03:0c:3b:38:87:2e:1e:f1:09:f3:cc:75:98:
06:f6:c6:47:51:ec:0b:bf:8e:80:ed:6d:f8:03:a3:03:96:a7:
27:ba:e2:95:8e:46:4e:56:a1:61:f9:76:d4:75:5c:d7:1a:22:
1c:9b:38:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 19:49:12 2026 by rpki-client